$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: O6GlgRgY/Y3oNsGNlqwDRuuo/Ka1ykS+hytbRFYLxG0= Subject key identifier: 57:66:DD:21:0D:F9:74:35:F7:E1:3B:F3:84:F4:00:27:8A:F6:EB:57 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 1083635175480743C9C4B8D8156548BE11393A22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: 26 Signing time: Wed 13 May 2026 13:36:05 +0000 Manifest this update: Wed 13 May 2026 13:31:05 +0000 Manifest next update: Thu 14 May 2026 16:38:05 +0000 Files and hashes: 1: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: VyDX/0T6AC89kHOvya/7OTMb9DMHhqouI47BYdqzpDc=) 2: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) 3: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:83:63:51:75:48:07:43:c9:c4:b8:d8:15:65:48:be:11:39:3a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: May 13 13:31:05 2026 GMT Not After : May 14 16:38:05 2026 GMT Subject: CN=5766DD210DF97435F7E13BF384F400278AF6EB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:3a:1c:f2:56:58:4d:43:8e:c4:e7:a7:fa: 30:48:c4:82:d0:19:d1:94:06:8b:7b:bc:f1:83:3b: 43:1b:9f:05:11:c8:c0:97:6c:8c:1c:c2:57:0b:7e: 88:3b:08:76:e0:8e:ad:0f:58:c0:41:8b:27:2b:b4: 39:d7:b5:61:43:8c:bd:5e:c4:5a:e2:ae:a8:b7:1d: e6:90:6b:6d:fe:bd:e8:f8:00:74:9f:47:6b:6e:d4: dc:3f:ec:48:33:3a:35:0b:57:67:97:b1:5b:9c:c1: e3:f4:9e:be:fe:d5:f2:38:b4:4e:3c:80:85:9b:e0: f6:4f:2c:48:af:22:73:3a:b0:8e:50:e9:86:e7:9d: f0:0f:e2:ae:48:da:d9:77:ca:27:a7:a2:77:04:35: 2a:3d:23:df:0d:9e:4e:bc:13:4b:8a:33:de:a7:ed: f3:07:31:5b:e2:ba:90:b8:6b:c2:6c:b5:6f:ba:0b: 3f:6b:91:a2:3d:d3:68:88:87:6f:e7:70:3b:55:37: e4:37:5e:2a:e2:57:a3:c8:ed:54:8c:75:66:07:66: 7b:4a:b6:ec:63:e2:4d:8e:5b:b8:6e:0e:2c:e9:be: 2f:3a:df:b5:e2:bb:13:61:6c:8b:24:85:72:76:a3: 97:b4:67:44:c2:0c:28:e2:08:89:c1:5d:dc:ec:b7: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:DD:21:0D:F9:74:35:F7:E1:3B:F3:84:F4:00:27:8A:F6:EB:57 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a4:b6:c7:01:0f:07:5a:f8:0c:f3:4c:87:30:1f:eb:86:88: cb:26:d5:3d:a8:d0:7b:db:05:c5:64:1a:59:4c:f5:80:10:bc: cd:b1:b6:ca:ec:12:1c:a2:47:88:37:49:db:be:a6:a1:41:e4: 2d:2a:16:99:73:14:62:ed:4d:4d:04:c5:84:c9:f6:39:07:02: c0:75:c0:81:28:0c:eb:4b:6a:53:1d:7b:e0:bd:f1:c1:73:34: 25:12:e3:24:dd:4c:67:43:1e:2c:f3:e2:ee:d4:42:d4:e5:42: e0:b3:34:16:cc:6b:27:fc:e7:39:b2:26:97:63:e4:0c:6b:7f: e6:24:21:4f:31:2b:f3:e7:87:13:f3:bd:13:b1:5d:c4:f2:4f: 6a:10:ed:4b:cf:e4:fc:bb:45:ba:d5:1d:c0:6a:76:09:8f:91: ff:f7:1b:fe:be:82:e8:c5:50:62:6a:3c:ac:b8:b6:c3:cc:b5: 37:78:6c:1d:0d:01:c9:70:25:83:be:82:3c:65:ff:65:8f:6b: 65:61:27:b5:0e:93:00:53:1a:fa:5b:ed:33:c2:2a:ca:16:df: 1a:cc:0a:0d:a1:a9:46:09:60:91:1b:2d:95:98:ec:d4:89:91: 65:99:92:ad:cf:e0:00:a9:93:13:1a:73:aa:dd:62:89:8e:15: 2a:04:2a:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEINjUXVIB0PJxLjYFWVIvhE5OiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA1MTMxMzMxMDVaFw0yNjA1MTQxNjM4MDVaMDMxMTAvBgNV BAMTKDU3NjZERDIxMERGOTc0MzVGN0UxM0JGMzg0RjQwMDI3OEFGNkVCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkToc8lZYTUOOxOen+jBIxILQ GdGUBot7vPGDO0MbnwURyMCXbIwcwlcLfog7CHbgjq0PWMBBiycrtDnXtWFDjL1e xFrirqi3HeaQa23+vej4AHSfR2tu1Nw/7EgzOjULV2eXsVucweP0nr7+1fI4tE48 gIWb4PZPLEivInM6sI5Q6YbnnfAP4q5I2tl3yienoncENSo9I98Nnk68E0uKM96n 7fMHMVviupC4a8JstW+6Cz9rkaI902iIh2/ncDtVN+Q3XiriV6PI7VSMdWYHZntK tuxj4k2OW7huDizpvi8637XiuxNhbIskhXJ2o5e0Z0TCDCjiCInBXdzst4XxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV2bdIQ35dDX34TvzhPQAJ4r261cwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6S2xwEPB1r4 DPNMhzAf64aIyybVPajQe9sFxWQaWUz1gBC8zbG2yuwSHKJHiDdJ276moUHkLSoW mXMUYu1NTQTFhMn2OQcCwHXAgSgM60tqUx174L3xwXM0JRLjJN1MZ0MeLPPi7tRC 1OVC4LM0FsxrJ/znObIml2PkDGt/5iQhTzEr8+eHE/O9E7FdxPJPahDtS8/k/LtF utUdwGp2CY+R//cb/r6C6MVQYmo8rLi2w8y1N3hsHQ0ByXAlg76CPGX/ZY9rZWEn tQ6TAFMa+lvtM8IqyhbfGswKDaGpRglgkRstlZjs1ImRZZmSrc/gAKmTExpzqt1i iY4VKgQqTg== -----END CERTIFICATE-----Generated at Wed May 13 17:09:28 2026 by rpki-client